Senior Application Security Engineer (AI models)

EPAM Systems Inc; Polska; Hybrid; PLN 180,000 - 320,000; Full time

Benefits offered by this job

Hybrid work by design

Remote work within Poland

Relocation opportunities

English classes

Health insurance

Multisport

Shopping vouchers

Employee Stock Purchase Plan with 15%/

Job summary

EPAM Systems Inc seeks a Senior Application Security Engineer to define and drive secure SDLC practices across client projects. You will lead security testing, threat modeling, and secure design, collaborating with developers to deliver secure code under tight deadlines.

The role requires strong OWASP knowledge, hands-on security tooling, and experience with Azure DevOps, GitHub Copilot, and Codex. English proficiency is essential; hybrid/remote work in Poland is available.

Qualifications

• 3+ years of experience in Application Security with a solid application development background.
• Hands-on experience with Azure DevOps and CI/CD pipelines.
• Familiarity with GitHub Copilot and Codex.
• Knowledge of OWASP Top 10 and secure design principles.
• Excellent English communication skills (B2+).
• Certification such as CISSP, CSSLP, CEH or OSCP is a plus.

Responsibilities

• Collaborate with software and security engineers to design and maintain product security tools and services.
• Serve as the technical point of contact for product teams regarding CI/CD security and Sec Ops.
• Leverage AI models and security harness to assess code for vulnerabilities and misconfigurations.
• Develop scripts to enable secure service consumption and automate security tasks.
• Lead security QA and testing activities across the SDLC.
• Improve SAST, DAST, and IaC security tool operations and cloud security coverage.

Skills

Application security

Threat modeling

Security architecture

CI/CD security

Communication

Education

Bachelor's degree in Computer Science or Cyber Security

CISSP or equivalent certification

Tools

Azure DevOps

GitHub Copilot

Codex

Python

JavaScript

C#

PowerShell

Job description

We are seeking a Senior Application Security Engineer to define consistent Security Software Development Lifecycle practices across all client technology projects.In this role, you will ensure application security vulnerabilities are mitigated to tolerable levels throughout the planning and delivery cycles.The ideal candidate brings strong application security knowledge, web application development experience, and team leadership skills, along with a solid understanding of OWASP, CWE25, Data Protection, Access Management, software vulnerabilities, secure design best practices, and threat modeling. You will collaborate with developers to produce secure code under tight deadlines in a dynamic environment.ResponsibilitiesCollaborate as part of a team of software and security engineers to design, maintain, and build product security tools and servicesServe as the technical point of contact for product teams regarding CI/CD automation and Product Application Sec OpsLeverage approved AI models and Cyber Harness to assess application code for business logic weaknesses, misconfigurations, and vulnerabilitiesBuild and automate scripts that enable developers to easily consume security services delivered by the Sec Engineering and Automation teamOwn security product QA and testing activitiesRun software composition analysis (SCA) toolsInterpret and explain penetration testing findings to the software engineering team, assisting them with triage and risk mitigation guidanceArticulate business risk when assessing software vulnerabilitiesContinuously improve the operations of SAST, DAST, and IaC security toolsEnhance the operations of Web Application Firewalls (WAF) and IDSExpand security coverage and tooling in cloud environments such as Microsoft Azure and AWSRequirementsDegree in Computer Science or Cyber Security3+ years of experience in Application Security with a strong application development backgroundHands-on experience with Azure DevOpsPrior experience using AI models and Cyber Harness to support security evaluation of applications and software codeFamiliarity with GitHub, Copilot, and CodexKnowledge of OWASP Top 10 for Agentic AI, AI skills development, and security triageProficiency in coding with Python, JavaScript, C#, or PowerShellDeep understanding of OWASP, CWE25, Data Protection, Access Management, software vulnerabilities, secure design best practices, and threat modelingExcellent analytical skills with strong attention to detailCISSP, CSSLP, CEH, OSCP, or similar certificationPresentation skills with the ability to communicate complex solutions to less technical audiencesExcellent command of written and spoken English (B2+ level)Nice to havePrior experience working in a large organization or within Financial ServicesExposure to secure SDLC program definition across enterprise technology projectsWe offerWe gather like-minded people:Top tech minds driving innovation in AI, cloud and digital platform modernizationSupportive team and agile, startup-like cultureHybrid by design mode and opportunity to work remotely within PolandChance to work abroad for up to 60 days annuallyBusiness-driven relocation opportunitiesWe provide growth opportunities:Career development programsThought leadership, mentoring, soft skills and well-being programsCertification (Anthropic, Gemini, GCP, Azure, AWS)English classesWe cover it all:Stable payParticipation in the Employee Stock Purchase Plan with a 15% discountBenefits package (health insurance, multisport, shopping vouchers)Referral bonuses up to $2,000Offices featuring entertainment and relaxation zones, table tennis and football, free snacks, coffee and moreCorporate, social and well-being eventsPlease, note:Benefits listed above are available to employees onlyWe are open for working with Contractors. Terms of B2B cooperation agreements are agreed individuallyWe will reach out to selected candidates exclusivelyEPAM is global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and ambitious startups. With over thirty years of expertise in custom software, product and platform engineering, we empower our clients to become AI-Native enterprises, driving measurable value from innovation and digital investments.